Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
dev	[ DIR ]	drwxrwxr-x	2026-08-17 03:12
test	[ DIR ]	drwxrwxr-x	2026-08-17 03:12
.htaccess	237 B	-r-xr-xr-x	2026-08-17 03:12
cache.yaml	687 B	-rwxrwxr-x	2025-06-19 08:10
debug.yaml	261 B	-rwxrwxr-x	2025-06-19 08:10
doctrine.yaml	6.66 KB	-rwxrwxr-x	2026-05-18 12:51
doctrine_migrations.yaml	268 B	-rwxrwxr-x	2025-06-19 08:10
ewz_recaptcha.yaml	191 B	-rwxrwxr-x	2025-06-19 08:10
framework.yaml	1.02 KB	-rwxrwxr-x	2026-04-02 11:48
google_recaptcha.yaml	988 B	-rwxrwxr-x	2025-06-19 08:10
league_oauth2_server.yaml	533 B	-rwxrwxr-x	2025-07-04 14:25
mailer.yaml	56 B	-rwxrwxr-x	2025-06-19 08:10
messenger.yaml	865 B	-rwxrwxr-x	2025-06-19 08:10
monolog.yaml	2.83 KB	-rwxrwxr-x	2026-04-02 11:48
nelmio_cors.yaml	323 B	-rwxrwxr-x	2025-07-04 14:25
notifier.yaml	357 B	-rwxrwxr-x	2025-06-19 08:10
nyholm_psr7.yaml	627 B	-rwxrwxr-x	2025-07-04 14:25
ramsey_uuid_doctrine.yaml	85 B	-rwxrwxr-x	2025-06-19 08:10
routing.yaml	335 B	-rwxrwxr-x	2025-06-19 08:10
security.yaml	3.33 KB	-rwxrwxr-x	2026-05-20 09:05
sonata_admin.yaml	293 B	-rwxrwxr-x	2025-07-04 14:25
sonata_block.yaml	17 B	-rwxrwxr-x	2026-05-18 12:51
sonata_form.yaml	37 B	-rwxrwxr-x	2025-06-19 08:10
translation.yaml	418 B	-rwxrwxr-x	2025-06-19 08:10
twig.yaml	873 B	-rwxrwxr-x	2026-05-18 12:51
uid.yaml	87 B	-rwxrwxr-x	2025-06-19 08:10
validator.yaml	354 B	-rwxrwxr-x	2025-06-19 08:10
web_profiler.yaml	337 B	-rwxrwxr-x	2025-06-19 08:10
webpack_encore.yaml	1.65 KB	-rwxrwxr-x	2025-06-19 08:10

Rename

security:
    # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
    password_hashers:
        App\UserBundle\Entity\UserOld:
            id: App\UserBundle\Security\Hasher\Echasl23Md5PasswordHasher
        App\UserBundle\Entity\UserLogin:
            id: App\UserBundle\Security\Hasher\MemberPortalLegacyPasswordHasher
        Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
    # https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
    providers:
#        users_in_memory: { memory: null }
        users:
            entity:
                class: App\UserBundle\Entity\UserList
                property: 'username'
        member_portal_users:
            id: App\UserBundle\Security\MemberPortalUserProvider
        echasl23_users:
            id: App\UserBundle\Security\Echasl23UserProvider
        app_user_provider:
            chain:
                providers: ['users', 'member_portal_users', 'echasl23_users']
#        user_provider:
#            id: iga_user_provider
    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        api:
            pattern: ^/api
            stateless: true
            provider: app_user_provider
            custom_authenticators:
                - App\UserBundle\Security\OAuth2Authenticator
        # admin:
        #     pattern: ^/admin
        #     lazy: true
        #     provider: users
        #     logout:
        #         path: logout
            # Allow access to admin area for authenticated users with ROLE_ADMIN
        main:
            pattern: ^/(?!api) # |admin)
            lazy: true
            provider: app_user_provider
            form_login:
                check_path: /login
                login_path: /login
                success_handler: iga_user.authentication.handler.login_success_handler
                failure_handler: iga_user.authentication.handler.login_failure_handler
            logout:
                path: logout

# activate different ways to authenticate
            # https://symfony.com/doc/current/security.html#the-firewall

# https://symfony.com/doc/current/security/impersonating_user.html
            # switch_user: true

# Easy way to control access for large sections of your site
    # Note: Only the *first* access control that matches will be used
    access_control:
        # - { path: ^/api, roles: IS_AUTHENTICATED_FULLY }  # Temporarily disable
        - { path: ^/admin, roles: ROLE_ADMIN }
        - { path: ^/member-firm, roles: [ROLE_MEMBER_FIRM, ROLE_USER] }
        # - { path: ^/profile, roles: ROLE_USER }

when@test:
    security:
        password_hashers:
            # By default, password hashers are resource intensive and take time. This is
            # important to generate secure password hashes. In tests however, secure hashes
            # are not important, waste resources and increase test times. The following
            # reduces the work factor to the lowest possible values.
            Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
                algorithm: auto
                cost: 4 # Lowest possible value for bcrypt
                time_cost: 3 # Lowest possible value for argon
                memory_cost: 10 # Lowest possible value for argon